CVE-2025-61972 Privilege escalation in AMD EPYC™ 8004 Series Processors
Local admin attackers can bypass lock bits to access SMN registers, enabling arbitrary code execution in the AMD Secure Processor and compromising SEV-SNP guests.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-61972?
CVE-2025-61972 is a high-severity vulnerability in AMD EPYC™ 8004 Series Processors, published on 13 May 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to gain arbitrary System Management Network (SMN) access, potentially resulting in arbitrary code execution in AMD Secure Processor (ASP) and loss of the SEV-SNP guest's confidentiality and integrity.
Weakness: CWE-1233
Which versions are affected by CVE-2025-61972?
How do I fix CVE-2025-61972?
No fix has been published for CVE-2025-61972 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-61972 being exploited?
There is no known exploitation of CVE-2025-61972 in the wild and no public exploit code.